-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from multiple functions using assert macros to validate N-API status codes without proper error handling. The GET_VALUE_WITH_NAPI_FUNC macro pattern combined with assert(status == napi_ok) creates crash points when unexpected data types are provided. The size() method's interaction with PixelArray::Malloc demonstrates inadequate input validation for zero values, leading to memory corruption. Each identified function matches crash patterns observed in the PoC and lacks proper type checking/error recovery mechanisms.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| images | npm | <= 3.2.4 |